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SYSTEM AND METHOD FOR DETERMINING 
SUBSCRIBER INFORMATION 

CROSS-REFERENCE TO RELATED APPLICATIONS 
I This application is related to and filed concurrently 

^ L? "^ith pending U/fs. Patent Application Serial No. , 

entitled "Sys/cem and Method for Identifying a Subscriber 
for Conneciiion to a Communication Network." These 
applications have been commonly assigned to Cisco 
Technology, Inc. 



TECHNICAL FIELD OF THE INVENTION 

This invention relates in general to data 
communication, and more particularly to a system for 
determining subscriber information. 
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BACKGROUND OF THE INVENTION 

Communication systems support the provisioning of 
voice, data, multimedia or other services and information 
to subscribers. A problem with prior communication systems 
is that a particular subscriber may pirate the services of 
another subscriber in the system without properly 
subscribing for the services. One solution to this problem 
is to assign a unique user name and password to the 
subscribers and to restrict access to particular services 
based upon a successful response to a query for a 
subscriber's user name and password. This solution is 
ineffective, however, when one subscriber assumes the 
identity of another subscriber by misappropriating the user 
name and password of the other subscriber and, thereby, 
obtains access to the other subscriber's services. 
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SUMMARY OF THE INVENTION 

In accordance with the present invention, the 
disadvantages and problems associated with prior 
communication systems have been substantially reduced or 
5 eliminated. 

In accordance with one embodiment of the present 
invention, a system for determining subscriber information 
includes an access server coupled to a number of 
subscribers using a communication network, a memory coupled 

10 to the access server, and a processor coupled to the 

memory. The access server receives a communication from a 
particular subscriber using a particular one of a number of 
virtual circuits associated with the communication network. 
The memory stores subscriber information for the 

15 subscribers, wherein the subscriber information is indexed 

by path information that identifies a virtual circuit 
assigned to the particular subscriber. The processor 
determines the subscriber information for communication to 
the particular subscriber based upon the path information 

2 0 and the particular virtual circuit used to receive the 

communication from the particular subscriber. 

Another embodiment of the present invention is a 
method for determining subscriber information that includes 
receiving a communication from a particular one of a number 
25 of subscribers using a particular one of a number of 

virtual circuits associated with a communication network. 
The method continues by storing subscriber information for 
the subscribers. The subscriber information is indexed by 
path information that identifies a virtual circuit assigned 

3 0 to the particular subscriber. The method concludes by 

determining the subscriber information for communication to 
the particular subscriber based upon the path information 
and the particular virtual circuit used to receive the 
communication from the particular subscriber. 



062891.0328 PIWeNT APPLICATION 



Yet another embodiment of the present invention is an 
information server that includes a memory and a processor. 
The memory stores subscriber information for a number of 
subscribers. The subscriber information is indexed by path 
5 information that identifies a virtual circuit assigned to 

a particular subscriber. The processor determines the 
subscriber information for communication to the particular 
subscriber based upon the path information and a particular 
virtual circuit that couples the particular subscriber to 

10 an access server. 

Still another embodiment of the present invention is 
an access server that includes an interface coupled to a 
number of subscribers using a communication network and a 
controller coupled to the interface. The interface 

15 receives a communication from a particular subscriber using 

a particular one of a number of virtual circuits associated 
with the communication network. The controller 

communicates a request to an information server for 
determining subscriber information associated with the 

2 0 particular subscriber. The request identifies the 

particular virtual circuit used to receive the 
communication from the particular subscriber. 

Technical advantages of the present invention include 
a system that identifies subscribers and determines 

25 subscriber information based, in part, upon path 

information and the particular virtual circuit used to 
receive a communication from a particular subscriber. 
Whereas in prior communication systems a particular 
subscriber may pirate the services of another subscriber by 

30 misappropriating the other subscriber's user name and 

password, the present invention provides services based 
upon "trusted" information which is generally not 
discoverable by another subscriber. Such "trusted" 

information includes, for example, path information and 
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information identifying the particular virtual circuit 
actually used to receive a communication from a particular 
subscriber. In this respect, subscribers of the present 
invention cannot access services and information designated 
5 for other subscribers. Therefore, the identification 

techniques of the present invention provide integrity to 
the communication system. 

Other technical advantages are readily apparent to one 
skilled in the art from the following figures, descriptions 
10 and claims. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

For a more complete understanding of the present 
invention and its advantages, reference is now made to the 
following description taken in conjunction with the 
accompanying drawings, in which like reference numbers 
indicate like features and wherein: 

FIGURE 1 illustrates a communication system according 
to the present invention; 

FIGURE 2 illustrates one embodiment of an access 
server used by the system; 

FIGURE 3 illustrates one embodiment of an 
identification table used by the system; 

FIGURE 4 illustrates one embodiment of a routing table 
used by the system; and 

FIGURE 5 illustrates a flowchart of an exemplary 
method according to the present invention. 
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DETAILED DESCRIPTION OF THE INVENTION 

FIGURE 1 illustrates a communication system 10 that 
includes subscribers 12 coupled to access servers 18 using 
a first communication network 14. In general, access 
5 servers 18 initiate the identification of a subscriber 12 

and, in response, communicate information to the subscriber 
12 and/or grant the subscriber 12 access to a second 
communication network 20. 

Subscribers 12 comprise any suitable number and 

10 combination of communication devices, such as customer 

premises equipment, that employ any appropriate 
communication techniques to communicate with access server 
18 using communication network 14. In one embodiment, 
subscribers 12 couple to a communication server 22 in the 

15 local loop using traditional twisted pair subscriber lines 

24. Subscribers 12 and communication server 22 exchange 
information using high bandwidth digital subscriber line 
technology, referred to generally as XDSL . Communication 
server 22 may reside at a central office, remote terminal, 

2 0 or other access point in communication system 10 that 

allows coupling to local loops formed by twisted pair 
subscriber lines 24 . 

Subscribers 12 may also be associated with a local 
area network (LAN) , such as an Ethernet network 30, a token 
25 ring network 32, a fiber distributed data interface (FDDI) 

network, an asynchronous transfer mode (ATM) network 36, or 
any other association or arrangement of subscribers 12 in 
a network environment (referred to generally as LAN 30) . 
LAN 30 supports Ethernet (10 Mbps) , Fast Ethernet (100 

3 0 Mbps), Gigabit Ethernet, switched Ethernet, or any other 

suitable networking protocol or technology. LAN 3 0 couples 
to communication network 14 using communication server 22, 
network interface 34, or any combination of communication 
server 22 and network interface 34. In one embodiment. 
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network interface 34 comprises hubs, routers, bridges, 
gateways, and other suitable communication devices and 
related software that support suitable communication 
protocols to couple LAN 30 to communication network 14. 
5 Communication network 14 comprises a plurality of 

virtual circuits 16 that support communication between 
communication server 22, network interface 34, and access 
server 18. In a particular embodiment, communication 
network 14 is part of a wide area network (WAN) that 

10 supports a suitable communication technology, such as ATM, 

frame relay, X.25 packet switching, statistical 
multiplexers, switched mult i -megabit data service (SMDS) , 
high-level data link control (HDLC) , serial line Internet 
protocol (SLIP) , point-to-point protocol (PPP) , 

15 transmission control protocol/Internet Protocol (TCP/IP) or 

any other suitable WAN protocol or technology. Although 
the discussion below focuses on a particular ATM embodiment 
of communication network 14, communication system 10 
contemplates any suitable WAN protocol or technology. 

2 0 Access server 18 comprises any number and combination 

of interfaces, switches, routers, or any other suitable 
communication devices and related software that terminates 
a preassigned virtual circuit 16 for each subscriber 12 . 
Access server 18 is described in greater detail with 

25 respect to FIGURE 2. Access server 18 is coupled to an 

information server 50 using a link 52. 

Communication network 20 comprises any combination of 
local area networks (LANs) , wide area networks (WANs) , 
global computer networks, hubs, routers, bridges, gateways, 

30 switches, servers, databases, or any other association of 

suitable wireline or wireless communication devices and 
networks, and related software, that provides subscribers 
12 access to voice, data, multimedia, or other services 
and/ or information . 
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A service provider associated with communication 
network 20, such as an Internet Service Provider (ISP), 
may employ one or more access servers 18 to restrict access 
to network 20 based upon the proper identification of 
5 subscribers 12 . Access servers 18 may further be used to 

restrict access to information based upon the proper 
identification of subscribers 12. In general, system 10 
assigns to each subscriber 12 a unique virtual circuit 16 
that is to be used by the subscriber 12 to communicate with 
10 access server 18. When an access server 18 receives a 

communication from a particular subscriber 12, information 
■'S server 50 identifies the subscriber 12 based, in part, upon 

the virtual circuit 16 assigned to the subscriber 12 and 
'^i the virtual circuit 16 actually used to receive the 

15 communication ■ from the subscriber 12 . 

rS Each virtual circuit 16 comprises a communication path 

between a particular subscriber 12 and an access server 18 
U that supports the appropriate communication technology of 

communication network 14. Although the following 

Q 2 0 description of the present invention is detailed with 

'^"^ . respect to virtual circuits 16 in an ATM networking 

environment, it should be understood that a virtual circuit 
16 assigned to a subscriber 12 in system 10 may be defined 
in any suitable networking environment using any suitable 
25 communication technologies and protocols, without deviating 

from the scope of the present invention. 

A virtual circuit 16 in an ATM networking environment 
comprises a series of virtual path identifiers (VPI) and 
virtual channel identifiers (VCI) . Together, a VPI and a 
30 VCI identify the next destination of an ATM cell as it 

passes through a series of communication devices in network 
14 and terminates in access server 18 . A unique virtual 
circuit 16 can therefore be assigned to each subscriber 12 
by storing predetermined virtual circuit information, such 



062891 . 0328 




:nt application 



as VPI and VCI information defining the virtual circuit 16, 
in communication server 22, network interface 34, and the 
communication devices associated with network 14 and access 
server 18 . 

5 Specific virtual circuit information defining some 

portion of a virtual circuit 16, such as the portion of the 
virtual circuit 16 coupled to communication server 22 
and/or communication server 34 or the portion of the 
virtual circuit 16 coupled to access server 18, may be used 
10 to identify uniquely the entire virtual circuit 16 to the 

other components of system 10, and is generally referred to 
^i; as a "virtual circuit identifier." Therefore, for example, 

=^ the virtual circuit identifier of a particular virtual 

i=S circuit 16 may be defined using the VPI and VCI information 

15 for that portion of the virtual circuit 16 terminating in 

i fj access server 18. 

Information server 50 comprises a processor 54 coupled 
U to a memory 56. Processor 54 may comprise a central 

processing unit associated with a computer system, such as 
i;:5 2 0 a mainframe, a workstation, or any other suitable general 

'''^ purpose data processing facility. Memory 56 comprises any 

suitable volatile or non-volatile memory device associated 
with processor 54 . Memory 56 generally stores a number of 
files, lists, tables, or any other arrangement of 
25 information that supports the identification of subscribers 

12 in system 10. For example, memory 56 includes 

identification table 58 having path information 60 and 
subscriber information 62 for subscribers 12 in system 10. 
Path information 60 comprises virtual circuit information 
30 identifying the unique virtual circuits 16 assigned to 

subscribers 12 (e.g., virtual circuit identifiers), access 
server information, interface information, user 
information, and/or any other type of information used to 
identify subscribers 12. Subscriber information 62 
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comprises address information, configuration information, 
and/or any other suitable information used to upgrade, 
monitor, modify, or otherwise operate subscribers 12. 

The components and information stored in information 
5 server 50 may be arranged integral to or remote from access 

server 18. Furthermore, information server 50 may comprise 
any combination of processors 54 and memory 5 6 to form any 
number of separate information servers 50 that may each be 
accessed by access server 18 using appropriate 
10 communication protocols. For example, information server 

5 0 may comprise any number and combination of information 
servers 50 that may be accessed using a RADIUS protocol, a 

;f Trivial File Transfer Protocol ("TFTP"), a Dynamic Host 

Configuration Protocol ("DHCP"), or any suitable 
15 communication protocol. 

Jl In operation, access server 18 supports the 

provisioning of services to subscribers 12 in system 10 . 
In particular, access server 18 receives a communication 

,2 from a particular subscriber 12 using a particular one of 

;3 20 the virtual circuits 16 associated with communication 

network 14 . The communication issued by subscriber 12 may 
comprise the initiation of a point-to-point protocol 
session, a TFTP broadcast message, or any suitable request 
for services. In one example, a subscriber 12 requests 
25 connectivity to communication network 20. In another 

example, a subscriber 12 requests subscriber information 
62. Prior to granting the subscriber 12 access to network 
2 0 or communicating subscriber information 62 to the 
subscriber 12, access server 18 and/or information server 
3 0 50 identify subscriber 12 based, in part, upon path 

information 60 associated with the particular subscriber 12 
and the particular virtual circuit 16 actually used by the 
access server 18 to receive the communication from the 
particular subscriber 12 . 
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A problem with prior communication systems is that a 
particular subscriber 12 may assume the identity of another 
subscriber 12, such as by using a misappropriated user name 
and password, and thereby pirate the services of the other 



invention is that path information 60 for a particular 
subscriber 12 is information that is generally not 
discoverable by another subscriber 12 and, therefore, is 
not easily misappropriated by other subscribers 12. System 
10, therefore, overcomes the disadvantages of prior 
communication systems by identifying a particular 
subscriber 12 based, in part, upon path information 60 and 
the particular virtual circuit 16 used by access server 18 
to receive a communication from the particular subscriber 
12 . Accordingly, system 10 identifies subscribers 12 to 
support provisioning the proper services to the proper 
subscribers 12 . 

FIGURE 2 illustrates access server 18 in more detail. 
Virtual circuits 16 of communication network 14 couple to 
one or more interfaces 70. Each interface 70 couples to an 
associated first port 72 of a switch fabric 74 . A number 
of route processors 76 couple to second ports 78 of switch 
fabric 74 . Route processors 76 also couple to interface 
80, which in turn couples to communication network 20. In 
a particular embodiment, interfaces 70, switch fabric 74, 
route processors 76, and interface 80 reside in a single 
housing, rack mount, or other arrangement of integrated or 
separate components at a single location in communication 
system 10 . 

A controller 82 manages the overall operation of 
access server 18. Controller 82 communicates information 
with components of access server 18 using bus 84. A memory 
86 coupled to controller 82 stores program instructions 88 
and an access server identifier 90. Interfaces 70, switch 



subscriber 12. 



A particular advantage of the present 
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fabric 74, route processors 16, and interface 80 access 
memory 86 directly using bus 84 or indirectly using 
controller 82. Alternatively, information maintained in 
memory 86 may reside in different components of access 
server 18 or in components external to access server 18. 

Program instructions 88 include software code, 
parameters, protocols, and other instructions and data 
structures that controller 82 accesses and executes to 
generate and communicate a request 104, such as an 
identification request, to information server 50. Access 
server identifier 90 comprises any suitable information, 
such as a management IP address, uniquely identifying 
access server 18 to the other components of system 10. 

Each interface 70 comprises any suitable combination 
of hardware and software components that terminate virtual 
circuits 16 in access server 18. In one embodiment, an 
interface 70 comprises one or more network line cards 92, 
each network line card 92 having an interface identifier 
94. An interface identifier 94 may comprise a module 
identifier, a slot identifier, a port identifier, or any 
other suitable information used to identify an interface 70 
uniquely within access server 18. 

Switch fabric 74 comprises any suitable combination of 
hardware and software components that directs, couples, 
and/or switches information communicated by subscribers 12 
to a selected route processor 76 and/or controller 82. 
Switch fabric 74 maintains virtual circuit identifiers 96 
reported to it by one or more components of communication 
network 14. Virtual circuit identifiers 96 may also reside 
in memory 86. Virtual circuit identifiers 96 comprise any 
suitable information that uniquely identifies the virtual 
circuit 16 upon which a particular communication 102 is 
received from a particular subscriber 12 by access server 
18. In one embodiment, a virtual circuit identifier 96 may 
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be defined using the VPI and VCI information for that 
portion of a particular virtual circuit 16 terminating in 
the access server 18. 

Each route processor 76 comprises any suitable 
5 combination of hardware and software components that 

perform termination, conversion, segmentation, reassembly, 
addressing, and other functions supported by routers, 
bridges, gateways, multiplexers, and other WAN and LAN 
networking devices. Each route processor 76 maintains a 
10 routing table 98. Routing table 98 maintains information 

that allows route processor 76 to route information between 
'Si communication network 14 using interface 70 and 

-.i; 

2 communication network 20 using interface 80 according to 

g communication sessions established by access server 18 in 

15 response to identifying subscribers 12. Routing table 98 

f\ is described in greater detail with reference to FIGURE 4 . 

Interface 80 comprises any suitable combination of 
hardware and software components that communicate 
% information received from route processors 76 to 

J 20 communication network 20 using any suitable communication 

protocols. Controller 82 couples to information server 50 
using link 52 and comprises any suitable combination of 
hardware and software components that execute program 
instructions 88 to initiate the identification of 
25 subscribers 12 in system 10. 

In operation, access server 18 receives a 
communication 102 from subscriber 12 using a particular 
virtual circuit 16. The virtual circuit identifier 96 for 
the virtual circuit 16 upon which communication 102 was 
30 received is determined by switch fabric 74. Controller 82 

receives and examines communication 102 to determine if it 
contains a request for services. For example, 

communication 102 may include a request for subscriber 
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information 62 and/or a request for access to communication 
network 2 0 . 

If communication 102 includes a request for services, 
controller 82 executes program instructions 88 to generate 
5 a request 104 for communication to information server 50 to 

identify the subscriber 12 that sent communication 102. 
Controller 82 generates request 104 according to any- 
suitable communication protocols used by information server 
50, such as TFTP, DHCP or RADIUS protocol. Request 104 

10 includes any appropriately formatted or configured 

combination of request parameters, such as an appropriate 
access server identifier 90, interface identifier 94, and 
virtual circuit identifier 96. 

Information server 50 receives request 104 and 

15 identifies subscriber 12 based upon path information 60 and 

the request parameters included in request 104 . In 
particular, information server 50 identifies subscriber 12 
if an entry exists in identification table 58 that is 
indexed by path information 6 0 corresponding to the request 

20 parameters included in request 104. For example, if 

processor 54 locates an entry in identification table 58 
indexed by path information 60 corresponding to the access 
server identifier 90, the interface identifier 94, and the 
virtual circuit identifier 96 communicated in request 104, 

25 then processor 54 identifies subscriber 12. 

Upon identifying subscriber 12, information server 50 
and/or access server 18 provide the services requested by 
subscriber 12 in communication 102. For example, 

information server 50 and/or access server 18 communicates 

30 particular subscriber information 62 to subscriber 12 

using, for example, communication network 14. In another 
example, access server 18 initiates a connection between 
subscriber 12 and communication network 20, such as by 
establishing a communication session between subscriber 12 
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and one or more communication devices associated with 
communication network 20. 

A particular advantage provided by the present 
invention is that system 10 identifies subscribers 12 based 
upon "trusted" information to which subscribers 12 cannot 
readily gain access, such as path information 60, access 
server identifiers 90, interface identifiers 94, and 
virtual circuit identifiers 96. In this respect, 

subscriber 12 cannot access services designated for other 
subscribers 12 by misappropriating the user name and 
password of the other subscribers 12. Therefore, the 
identification techniques of the present invention provide 
integrity to communication system 10. 

FIGURE 3 illustrates the contents of identification 
table 58 stored in memory 56 of information server 50. 
Each entry of identification table 58 includes path 
information 60 and subscriber information 62 for each 
subscriber 12. In particular, path information 60 includes 
virtual circuit information 110, interface information 112, 
and access server information 114. In one embodiment, path 
information 60 further includes user information 116. 

Virtual circuit information 110 identifies virtual 
circuits 16 assigned to subscribers 12. In a particular 
embodiment, virtual circuit information 110 may include a 
VPI , a VCI, or any other information that uniquely 
identifies a virtual circuit 16 assigned to the 
corresponding subscriber 12. As with virtual circuit 
identifiers 96, virtual circuit information 110 may be 
defined using the VPI and VCI information for that portion 
of an assigned virtual circuit 16 terminating in the access 
server 18. One particular ATM implementation includes an 
eight bit VPI and a sixteen bit VCI, as illustrated having 
two numbers separated by period. Another implementation 
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includes decimal values for VPI and VCI separated by a 
slash. 

Interface information 112 identifies interfaces 70 
assigned to subscribers 12 to terminate the virtual 
5 circuits 16 identified by corresponding virtual circuit 

information 110. In a particular embodiment, interface 
information 112 includes information identifying the slot, 
module, and port of a network line card 92 of interface 70. 
Access server information 114 identifies access servers 18 

10 assigned to subscribers 12 to terminate the virtual 

circuits 16 identified by corresponding virtual circuit 
information 110. 

User information 116 identifies user names and 
passwords assigned to the corresponding subscribers 12 

15 and/or the users of subscribers 12. For example, user 

information 116 may identify the user name and password for 
customer premises equipment associated with subscriber 12 . 
In another example, user information 116 may identify the 
user name and password for a user of a communication 

2 0 device, such as a computer, coupled to the customer 

premises equipment of subscriber 12. In this respect, 
system 10 supports the identification of subscribers 12 and 
the users of subscribers 12 . 

Subscriber information 62 comprises address 

25 information 118 and configuration information 120 that may 

be communicated to a corresponding subscriber 12 upon 
identification. Address information 118 includes a 

numerical or textual representation of one or more Internet 
protocol addresses, a network/node designation, netmask 

30 attributes, or any other network addresses used by 

subscriber 12 to communicate with communication network 20. 
Configuration information 120 includes configuration files, 
firmware patches, or any other suitable information used to 
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upgrade, monitor, modify, or otherwise operate subscribers 
12 . 

It should be understood that information 110-120 is 
arranged in separate columns of identification table 58 for 
5 illustrative purposes only, and that the contents of 

information 110-12 0 may be formatted or configured in any 
manner suitable for storage and/or communication using the 
communication protocols of information server 50. For 
example, identification table 58 may store the contents of 

10 information 110-120 according to any suitable format or 

configuration associated with TFTP, DHCP or RADIUS 
protocol. If path information 60 is formatted according to 
a particular communication protocol associated with 
information server 50, then it should be understood that 

15 the information communicated in request 104 may also be 

formatted in the particular communication protocol to 
support a consistent and accurate identification of 
subscribers 12 . 

Information server 50 identifies a particular 

20 subscriber 12 based upon path information 60 and the 

request parameters communicated by access server 18 in 
request 104. As described above, request 104 includes a 
virtual circuit identifier 96 of the particular virtual 
circuit 16 upon which access server 18 received 

25 communication 102. Request 104 further includes an 

interface identifier 94 indicating the interface 70 
terminating the virtual circuit 16 used by the subscriber 
12 to send communication 102. Request 104 also includes 
access server identifier 90 indicating the network address 

30 of the access server 18 receiving communication 102 from 

subscriber 12. Processor 54 identifies the subscriber 12 
that sent communication 102 if processor 54 identifies an 
entry in identification table 58 having virtual circuit 
information 110, interface information 112, and access 
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server information 114 corresponding to the virtual circuit 
identifier 96, interface identifier 94, and access server 
identifier 90, respectively, communicated in request 104. 

In one embodiment, request 104 further includes a user 
5 name and password sent by subscriber 12 in communication 

102. In this embodiment, processor 54 identifies an entry 
in identification table 58 indexed by user information 116 
corresponding to the user name and password provided in 
request 104. Processor 54 identifies subscriber 12 if the 

10 virtual circuit information 110, interface information 112, 

and access server information 114 associated with the 
identified user information 116 corresponds to the virtual 
circuit identifier 96, interface identifier 94, and access 
server identifier 90 communicated in request 104 . 

15 Upon identifying the subscriber 12, access server 18 

and/or information server 50 provides the services 
requested by subscriber 12 in communication 102. For 
example, access server 18 and/or information server 50 
communicates the appropriate address information 118 and/or 

2 0 configuration information 12 0 to the corresponding 

subscriber 12 using, for example, communication network 14 
or any other suitable link to subscriber 12 . In another 
example, access server 18 initiates the connection between 
subscriber 12 and communication network 20, such as by 

25 establishing a communication session between subscriber 12 

and one or more communication devices associated with 
communication network 20, and by modifying routing table 98 
to support the communication session. 

FIGURE 4 illustrates the contents of routing table 98 

30 associated with route processors 76 of access server 18. 

Each entry in routing table 98 includes session information 
130, address information 132, mapping information 134, 
address information 136, and routing information 138. 
Session information 130 is a unique or different designator 
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assigned to each communication session initiated by access 
server 18 upon identification of a subscriber 12. Address 
information 132 represents a network address used by the 
subscriber to connect to communication network 2 0 during a 
5 corresponding communication session. In one embodiment, 

address information 132 comprises address information 118 
issued to subscriber 12 upon identification. 

Mapping information 134 includes a VPI , a VCI, 
identifiers for ports associated with interface 80, or any 

10 other information that enables interface 80 to convey 

information received from route processors 76 to 
communication network 20. In a particular embodiment, 
interface 80 includes a switching capability that allows 
segmentation of communication network 2 0 for more 

15 efficient, modular, and fault tolerant communication. 

Information 134 may also be used by interface 80 to direct 
information received from communication devices associated 
with communication network 20 to a particular route 
processor 76. 

2 0 Address information 13 6 is a numerical or textual 

representation of an Internet protocol address, a 
network/node designation, or any other network address used 
to deliver information to a particular domain, 
communication device, or any other suitable recipient 
25 within communication network 20. Route processor 76 may 

convert address information 13 6 for each session into an 
appropriate format, depending on the particular 
implementation of access server 18 and communication 
network 20, 

3 0 Routing information 13 8 includes routing information 

protocol (RIP) information, 'open-shortest-path-first (OSPF) 
information, or any other suitable routing information that 
provides the most efficient, available, or optimum path to 
communicate information to a particular communication 



062891.0328 :JfeNT APPLICATION 

21 



device associated with communication network 20. Routing 
information 138 identifies particular nodes, paths, or 
other intermediate devices that establish a desirable route 
to the appropriate destination communication device within 
5 communication network 20. 

Upon identification of a subscriber 12 as described 
with reference to FIGURES 1-3, access server 18 may 
establish and support a communication session between the 
identified subscriber 12 and communication network 20. In 

10 particular, access server 18 creates an entry for 

subscriber 12 in routing table 98 having session 
information 13 0, address information 132, mapping 
information 134, address information 136, and routing 
information 138, and supports the communication session 

15 according to information 130-138. Upon the expiration of 

a communication session (e.g., time out, user termination, 
equipment malfunction) access server 18 removes the 
corresponding entry in routing table 98. 

FIGURE 5 illustrates a flowchart of an exemplary 

2 0 method according to the present invention. The method 

begins at step 150 where information server 50 stores path 
information 60 in identification table 58. Path 
information 60 includes virtual circuit information 110, 
interface information 112, and access server information 

25 114. Execution proceeds to step 152 where information 

server 50 stores subscriber information 62 indexed by path 
information 60 . Subscriber information 62 includes address 
information 118 and configuration information 120. 

Access server 18 receives communication 102 from a 

30 particular subscriber 12 at step 154. Controller 82 of 

access server 18 determines the appropriate request 
parameters for communication 102 at step 156, such as the 
appropriate access server identifier 90, interface 
identifier 94, and virtual circuit identifier 96. 
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Controller 82 generates and communicates request 104 at 
step 158. Request 104 generally includes the request 
parameters determined at step 156. 

Processor 54 of information server 50 determines 
whether the subscriber 12 is identified at step 160. In 
particular, processor 54 determines whether an entry in 
identification table 58 includes virtual circuit 
information 110, interface information 112, and access 
server information 114 corresponding to virtual circuit 
identifier 96, interface identifier 94, and access server 
identifier 90 communicated in request 104. If not, 
execution proceeds to step 162 where information server 50 
and/or access server 18 indicates to subscriber 12 that 
identification has failed. Execution then proceeds to step 
154 . 

If subscriber 12 is identified as determined at step 
160, execution proceeds to step 164 where access server 18 
and/or information server 50 provide to subscriber 12 the 
requested services and/or information. In one example, 
access server 18 and/or information server 50 may 
communicate subscriber information 62 to subscriber 12. In 
another example, access server 18 initiates a communication 
session between subscriber 12 and communication network 20. 
Access server 18 determines whether it has received another 
communication 102 at step 166. If so, execution returns to 
step 154. If not, execution terminates at step 168. 

Although the present invention has been described in 
several embodiments, a myriad of changes, variations, 
alterations, transformations, and modifications may be 
suggested to one skilled in the art, and it is intended 
that the present invention encompass such changes, 
variations, alterations, transformations, and modifications 
as fall within the spirit and scope of the appended claims. 



